AI & Machine Learning
Collecting Volatile Evidence From Compromised Host
The skill captures volatile evidence—memory, network connections, running processes, and system state—from a compromised host before it disappears, preserving a chain of custody. Incident responders, forensic analysts, and legal teams rely on it to obtain reliable, timely data that can withstand legal scrutiny, especially when fileless or memory‑resident malware is suspected or root‑cause analysis is required.
- Publisher / source
- Cybersecurity Skills (Community)
- Upstream record
- mukul975/Anthropic-Cybersecurity-Skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
9c9919119fe5ab9faeb5746555e9c7043d13eeef925b3311441442808c3fe91b